CVE-2017-16994

This exploit demonstrates an information leak vulnerability in the Linux kernel's mincore system call when handling VM_HUGETLB VMAs. It triggers uninitialized memory disclosure by repeatedly calling mincore on a large anonymous hugepage mapping.

This exploit leverages CVE-2017-16994 to bypass KASLR and disable mmap_min_addr protections, followed by a null pointer dereference to achieve privilege escalation via shellcode execution. It requires a custom kernel module (/proc/test) to trigger the vulnerability.

This exploit leverages an information leak vulnerability (CVE-2017-16994) in the Linux kernel's handling of MAP_HUGETLB mappings. It uses mincore to trigger uninitialized memory disclosure, revealing kernel addresses to bypass KASLR.

This repository contains a proof-of-concept exploit for CVE-2017-16994, which involves bypassing KASLR and disabling mmap_min_addr to achieve local privilege escalation via a null pointer dereference in the Linux kernel.